<![CDATA[errSecInternalComponent error with Developer ID Application certificate G2 Sub-CA]]>When I try to create a new Developer ID Application certificate for Apple, I'm presented with two options:

  • Previous Sub-CA
  • G2 Sub-CA

The previous Sub-CA expires in January 2027. But unfortunately, that's I was able to get to work.

The G2 Sub-CA requires XCode 11 or later, with an expiration date of 2031. I have XCode 13, but I get errSecInternalComponent error when signing the plugin.

Has anyone experienced this problem before?

]]>https://forum.hise.audio/topic/14817/errsecinternalcomponent-error-with-developer-id-application-certificate-g2-sub-caRSS for NodeMon, 08 Jun 2026 15:20:01 GMTMon, 08 Jun 2026 12:30:36 GMT60<![CDATA[Reply to errSecInternalComponent error with Developer ID Application certificate G2 Sub-CA on Mon, 08 Jun 2026 13:32:04 GMT]]>@resonant Just plugging my wares, I have a workshop that will walk you through the process: https://audiodevschool.com/courses/packaging-for-macos/

]]>https://forum.hise.audio/post/121004https://forum.hise.audio/post/121004Mon, 08 Jun 2026 13:32:04 GMT<![CDATA[Reply to errSecInternalComponent error with Developer ID Application certificate G2 Sub-CA on Mon, 08 Jun 2026 13:02:08 GMT]]>@David-Healey You don't even need the Installer one if you're not creating installers.

All you need is the Application one if you're just signing the plugins themselves.

]]>https://forum.hise.audio/post/121003https://forum.hise.audio/post/121003Mon, 08 Jun 2026 13:02:08 GMT<![CDATA[Reply to errSecInternalComponent error with Developer ID Application certificate G2 Sub-CA on Mon, 08 Jun 2026 12:55:19 GMT]]>@dannytaurus said in errSecInternalComponent error with Developer ID Application certificate G2 Sub-CA:

You need the bottom two, but I'm not sure which is first.

Order you create them doesn't matter. One is for signing plugins, the other is for the installer.

]]>https://forum.hise.audio/post/121002https://forum.hise.audio/post/121002Mon, 08 Jun 2026 12:55:19 GMT<![CDATA[Reply to errSecInternalComponent error with Developer ID Application certificate G2 Sub-CA on Mon, 08 Jun 2026 12:50:42 GMT]]>@resonant Claude says:

For VST3, AU, AAX, standalone apps, and notarization, you create Developer ID Application first.

The normal sequence is:

  1. Developer ID Application
    * Used to sign:
    * .app
    * .component (AU)
    * .vst3
    * .aaxplugin
    * frameworks, dylibs, helpers, etc.
    * Required for notarization.
  2. Developer ID Installer (optional)
    * Only needed if you’re distributing a signed .pkg installer.
    * Signs the package itself, not the plugin inside it.
]]>https://forum.hise.audio/post/121001https://forum.hise.audio/post/121001Mon, 08 Jun 2026 12:50:42 GMT<![CDATA[Reply to errSecInternalComponent error with Developer ID Application certificate G2 Sub-CA on Mon, 08 Jun 2026 12:48:06 GMT]]>@resonant You need the bottom two, but I'm not sure which is first. Claude should be able to guide you through it.

]]>https://forum.hise.audio/post/121000https://forum.hise.audio/post/121000Mon, 08 Jun 2026 12:48:06 GMT<![CDATA[Reply to errSecInternalComponent error with Developer ID Application certificate G2 Sub-CA on Mon, 08 Jun 2026 12:46:58 GMT]]>@dannytaurus

Thank you for the tip! Which of these is the "intermediate thing" option?

Screen Shot 2026-06-08 at 15.45.18.png

]]>https://forum.hise.audio/post/120999https://forum.hise.audio/post/120999Mon, 08 Jun 2026 12:46:58 GMT<![CDATA[Reply to errSecInternalComponent error with Developer ID Application certificate G2 Sub-CA on Mon, 08 Jun 2026 12:45:12 GMT]]>@resonant Claude recommends running these commands to make sure everything is working:

$ xcodebuild -version
Xcode 26.1.1
Build version 17B100
$ sw_vers
ProductName:		macOS
ProductVersion:		15.7.4
BuildVersion:		24G517
$ security find-identity -v -p codesigning
  1) XXXXXXXXXXXXXXXX "Developer ID Application: Daniel Weaver (XXXXX)"
     1 valid identities found
]]>https://forum.hise.audio/post/120998https://forum.hise.audio/post/120998Mon, 08 Jun 2026 12:45:12 GMT<![CDATA[Reply to errSecInternalComponent error with Developer ID Application certificate G2 Sub-CA on Mon, 08 Jun 2026 12:42:26 GMT]]>@resonant I think that was part of the change in the new 2031 method. You install an intermediate cert that actually issues your cert.

My Keychain, filtered for 'developer':

CleanShot 2026-06-08 at 13.41.04@2x.png

There's an older 2027 entry at the bottom, but the top ones are for my working cert.

]]>https://forum.hise.audio/post/120997https://forum.hise.audio/post/120997Mon, 08 Jun 2026 12:42:26 GMT<![CDATA[Reply to errSecInternalComponent error with Developer ID Application certificate G2 Sub-CA on Mon, 08 Jun 2026 12:41:09 GMT]]>@dannytaurus said in errSecInternalComponent error with Developer ID Application certificate G2 Sub-CA:

@resonant Did you do the 'intermediate certificate' thing? I recall having to add something like that to keychain.

No I didn't? Does yours work like that? There was no such need before.

]]>https://forum.hise.audio/post/120996https://forum.hise.audio/post/120996Mon, 08 Jun 2026 12:41:09 GMT<![CDATA[Reply to errSecInternalComponent error with Developer ID Application certificate G2 Sub-CA on Mon, 08 Jun 2026 12:38:14 GMT]]>@resonant Did you do the 'intermediate certificate' thing? I recall having to add something like that to keychain.

]]>https://forum.hise.audio/post/120995https://forum.hise.audio/post/120995Mon, 08 Jun 2026 12:38:14 GMT